This module explains how to use Group Policy to manage a variety of components and features of Windows. It will also explain how to audit files and folders and how to restrict access to applications using application control policies.

Lessons

Manage Group Membership by Using Group Policy Settings

Manage Security Settings

Auditing

Software Restriction Policy and Applocker

Lab: Using Group Policy to Manage Group Membership

Configure the Membership of Administrators by Using Restricted Group Policies

Audit Changes to Active Directory Using Directory Service Changes Auditing

After completing this module, students will be able to:

Delegate administrative permissions.

Audit Active Directory administration.

Module 10: Improving the Security of Authentication in an AD DS Domain

This module explains the domain-side components of authentication, including the policies that specify password requirements and the auditing of authentication-related activities.

Lessons

Configure Password and Lockout Policies

Audit Authentication

Configure Read-Only Domain Controllers

Lab: Configure Password and Account Lockout Policies

Configure the Domain’s Password and Lockout Policies

Configure a Fine-Grained Password Policy

Lab: Audit Authentication

Audit Authentication

Lab: Configure Read-Only Domain Controllers

Exercise 1: Install an RODC

Exercise 2: Configure Password Replication Policy

Exercise 3: Manage Credential Caching

After completing this module, students will be able to:

Configure password and lockout policies.

Audit authentication.

Configure read-only domain controllers.

Module 11: Configuring Domain Name System

This module explains how to implement DNS to support name resolution both within your AD DS domain and outside your domain and your intranet.

Lessons

Install and Configure DNS in an AD DS Domain

Integration of AD DS, DNS, and Windows

Advanced DNS Configuration and Administration

Lab: Installing the DNS Service

Add the DNS Server Role

Configure Forward Lookup Zones and Resource Records

Lab: Advanced Configuration of DNS

Enable Scavenging of DNS Zones

Explore Domain Controller Location

Configure Name Resolution for External Domains

After completing this module, students will be able to:

Install and configure DNS in an AD DS domain.

Describe the integration of AD DS, DNS, and Windows.

Describe advanced DNS configuration and administration tasks.

Module 12: Administering AD DS Domain Controllers

This module explains how to add Windows Server 2008 domain controllers to a forest or domain, how to prepare a Microsoft Windows Server 2003 forest or domain for its first Windows Server 2008 DC, how to manage the roles performed by DCs, and how to migrate the replication of SYSVOL from the File Replication Service (FRS) used in previous versions of Windows to the Distributed File System Replication (DFS-R) mechanism that provides more robust and manageable replication.

Lab: Configure the Global Catalog and Universal Group Membership Caching

Configure a Global Catalog

Configure Universal Group Membership Caching

Lab: Configure DFS-R Replication of SYSVOL

Observe the Replication of SYSVOL

Prepare to Migrate to DFS-R

Migrate SYSVOL Replication to DFS-R

Verify DFS-R Replication of SYSVOL

After completing this module, students will be able to:

Identify the domain controller installation options.

Install a Server Core DC.

Manage operations masters.

Configure Global Catalog

Configure DFS-R replication of SYSVOL.

Module 13: Managing Sites and Active Directory Replication

This module explains how to create a distributed directory service that supports domain controllers in portions of your network that are separated by expensive, slow, or unreliable links and how to configure replication amongst those servers.

Lessons

Configure Sites and Subnets

Configure Replication

Lab: Configure Sites and Subnets

Configure the Default Site

Create Additional Sites

Move Domain Controllers into Sites

Lab: Configure Replication

Create a Connection Object

Create Site Links

Designate a Preferred Bridgehead Server

Configure Intersite Replication

After completing this module, students will be able to:

Configure sites and subnets.

Configure replication.

Module 14: Directory Service Continuity

This module explains about the technologies and tools that are available to help ensure the health and longevity of the directory service. You will explore tools that help you monitor performance in real time, and you will learn to log performance over time so that you can keep an eye on performance trends in order to spot potential problems.

Lessons

Monitor Active Directory

Manage the Active Directory Database

Active Directory Recycle Bin

Back Up and Restore AD DS and Domain Controllers

Lab: Monitor Active Directory Events and Performance

Monitor AD DS with Performance Monitor

Work with Data Collector Sets

Lab: Manage the Active Directory Database

Perform Database Maintenance

Work with Snapshots and Recover a Deleted User

Lab: Using Active Directory Recycle Bin

Enable Active Directory Recycle Bin

Restore Deleted Objects with Active Directory Recycle Bin

Lab: Back Up and Restore Active Directory

Back Up Active Directory

Restore Active Directory and a Deleted OU

After completing this module, students will be able to:

Monitor Active Directory.

Manage the Active Directory database.

Describe the purpose of the Active Directory Recycle Bin.

Back up and restore AD DS and domain controllers.

Module 15: Managing Multiple Domains and Forests

This module explains how to raise the domain and forest functionality levels within your environment, how to design the optimal AD DS infrastructure for your enterprise, how to migrate objects between domains and forests, and how to enable authentication and resources access across multiple domains and forests.